Joomla XMap component version 2.3.4 suffers from a remote SQL injection vulnerability.
5f0ef74ab3c000e298085210a36c009c750b3fc235db83b82edddf011e9110dd
========================================================================
| # Title : Joomla com_xmap 2.3.4 Sql injection vulnerability
| # Author : indoushka
| # email : indoushka4ever@gmail.com
| # Tested on: windows 8.1 Français V.(Pro)
| # Vendor : https://github.com/guilleva/Xmap/blob/master/xmap-update.xml
========================================================================
Sql injection :
http://www.unhcr.org.in/index.php?option=com_xmap&view=html&id=1&Itemid=115 (inject her)
Greetz :
jericho http://attrition.org & http://www.osvdb.org/ * http://packetstormsecurity.com * Larry W. Cashdollar*
Hussin-X *D4NB4R * ViRuS_Ra3cH * yasMouh * https://www.corelan.be *
---------------------------------------------------------------------------------------------------------------